FundMore

The Bank of Canada just made it official; the risk Canadian lenders have been operating against for three years is over.

From the 2026 Financial Stability Report, released May 28: "we expect this risk to have fully passed by the second half of 2027." The risk in question is the pandemic-era mortgage renewal payment shock. The final wave lands in the next 12 months, and then it is done.

In the same statement, the BoC named the new top-of-stack risk: AI. The exact language is that AI "may also increase the speed, scale and sophistication of cyber attacks."

That is a signal swap, not a status update. For three years, every credit committee, every stress test, and every digital transformation roadmap has been calibrated against the renewal cliff. The BoC just removed that calibration. The risk replacing it is operational, not credit; it lives in the technology stack itself.

Three implications for Canadian lenders, especially the mid-market and non-bank tier:

Rebaseline the risk register. If pandemic renewals are still top three, the FSR has moved past you.

Audit AI-enabled lending workflows against the three vectors. Speed, scale, sophistication. For each, document the control and the gap.

Treat the audit trail as a product feature. A queryable decision log on every AI-assisted file is the new compliance floor.

The Big Six have the budgets and security teams to absorb this. The institutions in the second tier, the ones that spent 18 months racing to AI-enabled underwriting, have a narrower window. The FSR is the regulator-grade evidence you need to fund the next phase of the build.

What is your team retiring from its top-three risk list this quarter, and what is taking its place?

Read the full breakdown on the FundMore blog:

The Signal Swap: How the 2026 Financial Stability Report Resets Canadian Lender Risk The Bank of Canada just declared the mortgage renewal shock essentially over and named AI cyber risk as the new top concern. Here's what that means for mid-market banks, credit unions, and non-bank lenders.

15 hours. Then three minutes.

TD's first agentic AI application is in live production for mortgages and HELOCs. Pre-adjudication that used to take roughly 15 hours now averages under three minutes; a ~300x speed-up.

What the agent actually does, per TD's May 21 disclosure:

- Scans client documents
- Calculates income
- Validates against policy
- Performs consent checks
- Verifies income
- Searches for discrepancies
- Auto-generates the underwriter memo

Three reads for everyone outside the Big Six.

1. Underwriting speed is now baseline, not differentiator. Once a TD client gets a three-minute pre-adjudication, the rest of the market recalibrates.

2. The Big Six are scaling a pattern, not shipping a feature. BMO just hired its first head of digital assets and tokenization on May 12. RBC, Scotia, CIBC, and National all run AI labs. Expect production launches across HELOCs, LOCs, and small businesses within two quarters.

3. Mid-market and non-bank lenders do not need a Layer 6; they need a platform. A $20B credit union or a private lender cannot replicate TD's AI research org and should not try. What works is buying the outcome via a platform: agentic underwriting, KYC, document classification, fraud detection, and compliance delivered as a service.

Historical Canadian banking adoption cycles for major Big Six operational moves run 12 to 18 months before becoming table stakes. That clock started on May 21.

Speed is the new disclosure. The institutions that pair last week's regulatory work with this week's underwriting rebuild are the ones the renewal wave hands the market to.

https://hubs.li/Q04j6gSZ0